CVE-2017-1714 Privilege escalation in Client Application Access

High 7.8 Published 13 Feb 2018 Updated 17 Sep 2024

An authenticated local user can gain System privileges in IBM Notes and Domino NSD, requiring a patch to prevent privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-1714?

CVE-2017-1714 is a high-severity vulnerability in IBM Client Application Access, published on 13 Feb 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633.

Which versions are affected by CVE-2017-1714?

It affects 2 products.

Products include Ibm Client Application Access, Ibm Notes.

How do I fix CVE-2017-1714?

No fix has been published for CVE-2017-1714 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1714 being exploited?

There is no known exploitation of CVE-2017-1714 in the wild and no public exploit code.

Sources

Also known as GHSA-q9w9-3p2h-34q2.